UK game account security
Armour up your game accounts. Bounce back fast if one gets taken.
Step-by-step lockdown guides for the big platforms, scam breakdowns written in plain English, and a calm recovery plan for the moment something goes wrong. For players and the parents who help them.
- 8 platform lockdowns
- 10 scam breakdowns
- 0 bytes of your data sent

Self-check · 8 questions · stays on your device
Run your Armour score
Tick what is true for one account, right now. The shield fills as you go and the gaps turn into a short to-do list. Nothing is saved or sent.
Platform-specific steps: pick your platform guide.
Lock it down
Pick your platform
Each guide follows the same order: switch on 2-step verification, fix the password, check recovery details, then protect purchases. Every step is taken from the platform’s own help pages.
Platform guideSteam8-step lockdown + recovery route
Platform guideXbox and Microsoft account7-step lockdown + recovery route
Platform guidePlayStation8-step lockdown + recovery route
Platform guideNintendo7-step lockdown + recovery route
Platform guideEpic Games7-step lockdown + recovery route
Platform guideDiscord6-step lockdown + recovery route
Platform guideRoblox7-step lockdown + recovery route
Platform guideEA app and EA Account7-step lockdown + recovery route
Spot the red flags in 20 seconds
An invented example of how this scam often reads. Tap the parts that feel wrong, or reveal all 4 flags. The sender and addresses are invented for teaching; please do not type them into a browser.
Unusual sign-in detected on your gaming account.Your account will be locked within 24 hours2 unless you confirm your identity.Confirm here: account-verify-login.example3Enter your email, password and the 6-digit code4 we send you.
- 1
acc0unt-secure-check.example
A zero in place of an 'o' and an unrelated domain. Real messages come from the company's own domain. - 2
locked within 24 hours
A deadline pushes you to act before you check. - 3
account-verify-login.example
The link does not go to the platform's real website. - 4
6-digit code
A code is only for you. Anyone asking you to type it on their page is trying to sign in as you.
Know the tricks
Scams doing the rounds
Most account thefts start with a message, not a clever hack. These are the patterns that come up again and again.
Scam breakdownFree currency generatorsA website or video promises thousands of free coins, credits or skins if you enter your username and finish a few quick…
Scam breakdownPhishing login pagesA phishing page copies a real sign-in screen so closely that it is hard to tell apart.
Scam breakdown'Test my game' malwareSomeone messages you, often from a friend's account, asking you to try a game they have made.
Scam breakdownTrade and item scamsTrade scams take items rather than passwords.
Scam breakdownFake support agentsReal platform support teams rarely contact you first in a chat message, and they do not ask for your password, your…
Scam breakdownAccount buying and sellingWebsites and chat groups sell levelled-up accounts with rare items, and buyers approach players offering cash for…
Scam breakdownQR code login scamsMany apps let you sign in on a computer by scanning a QR code with your phone.
Scam breakdown'I accidentally reported you'A message, often from a friend's account, says they reported you by mistake and your account will be banned unless you…
Scam breakdownFake giveaways and streamer impersonationScammers copy the name, picture and style of streamers, creators and esports teams, then announce giveaways.
Scam breakdownCheat and mod malwareCheat programs, cracked copies of paid games and 'unlockers' often ask you to switch off security software and run them…

For parents and carers
Helping a child keep their account theirs
Children are targeted with “free currency”, fake giveaways and friendly strangers asking them to test a game. The parents’ guide covers family settings, spending controls and how to talk about scams without scaring anyone.
Read the parents’ guideWhere to report it in the UK
Reporting helps platforms and police spot patterns, even when they cannot act on every single case.
Report Fraud
National fraud and cyber crime reporting service for England, Wales and Northern Ireland, run by City of London Police. Launched on 4 December 2025, replacing Action Fraud.
Report online at reportfraud.police.uk or call 0300 123 2040.
Police Scotland
Fraud and cyber crime reports for people living in Scotland.
Call 101, or 999 if a crime is in progress or someone is in danger.
Your bank (159)
Suspected fraud involving your bank account or card.
Call the number on the back of your card, or 159, which connects you to many UK banks.
NCSC Suspicious Email Reporting Service
Phishing and scam emails, including fake game or platform emails.
Forward the email to [email protected]. Screenshots of scam texts or QR codes can also be sent here.
7726 scam text reporting
Scam text messages, supported by most UK mobile networks.
Forward the text to 7726 (spells SPAM on a keypad).
NCSC scam website reporting
Websites you believe are fake or fraudulent, such as fake login or generator pages.
Use the NCSC's online 'report a scam website' form.
Advertising Standards Authority
Scam or misleading adverts, including paid adverts for fake giveaways or fake support numbers.
Make a complaint through the ASA website.
CEOP (National Crime Agency)
Concerns about online sexual abuse or the way someone has been communicating with a child online.
Make a report through the CEOP Safety Centre. In an emergency call 999.
Childline and NSPCC
Support for children and young people (Childline) and advice for adults worried about a child (NSPCC helpline).
Childline: 0800 1111. NSPCC helpline: 0808 800 5000.
The platform's own reporting tools
Scam accounts, impersonators, malicious links and account takeovers on a specific game or chat service.
Use the in-app report option on the user or message, and the platform's official help site for account recovery. Never use support contacts sent to you in a message.
How these guides are made
Official sources, dated, no sales pitch
Every step comes from a platform’s own support pages or a UK public body such as the National Cyber Security Centre, and each guide lists what was checked and when. There are no ads or affiliate links here, and nothing to buy.
Read our method